Rule 2687428 VMware vCenter DCERPC Out-of-Bounds Write (CVE-2023-34048)

Rule Signatures
1

Lots of FP’s on this rule starting as soon as I updated the rules, no pcaps sorry.

1 Like
2

Thanks @James_inthe_box, we will investigate.

1 Like
3

Appreciate it…sorry about the lack of pcaps…sensitive data and all :frowning:

4

Update to the signature was pushed in yesterday’s release. This should have eliminated FPs and should alleviate the strain it may have caused.

Thanks again for reaching out!